UBB.Developers Forums UBB.classic V6.4 - 6.7 Modifications V6 Mod Ideas Security Fixes?

This post contains quite a few questions, so I'm not sure exactly where to post it! If this is the wrong section, you have my appologies!

Now...

I've been a loyal UBB customer for about 4 years now. I run a medium-large Role Playing forum currently located at http://www.furry.org.au/BornWild/cgi-bin/ultimatebb.cgi

I'm going to change servers, because our host refuses to change our FTP password and thanks to a leak, it's now out and a MAJOR security hole.

Just a little backstory there.

There is one guy on our forum who is 1337 Haxx0r supremo...And flaunts the fact that he can bust our forum at any time he desires. He did this even before the FTP pass was publicly known by using common backdoors in the UBB software.

We're at his mercy.

So, I'm looking for the BEST security hacks out there...Can anyone point me to some?

Also, how does one deal with a hacker? I know(think) he's from Russia. Though he's constantly changing his IP to places all over the world. Can anyone suggest what I can do about this?

Again, I appologize if all of this is in the wrong section...But I appreciate any responses whatsoever!

staying current with public final releases is your first best step in security matters. but if your ftp password is public, then I guess it really doesn't matter - then your first best step is to change passwords or move to a host that will, they could have uploaded any number of scripts/trojans/viruses by now...

I'm moving now, actually. I just redownloaded a fresh version of 6.3 and am going to install it later this evening.

Thaks for the reply

you are welcome... if you plan to keep your current threads and members, you will need to go over each file and make sure it isn't some script renamed to 0000715.cgi or something so it looks like a ubb file. Believe me, that does happen.

As much as I'd like to keep the current memberlist, I don't think it's going to happen...For one, I'm going to have to do all of this on dial-up. Frightening, lol. Plus there are over 7000 members in our Members folder...Oy! That would take weeks to do.

Then again I could always toss it on my co admins...LoL

Do you know of a program that would auto-check like that, out of curiosity?